Sourcecodester · Class/Exam Timetabling System · CVE-2026-14733
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Class and Exam Timetabling System version 1.0
**Description**
An issue exists in the processing of the '/edit coursea.php' endpoint. Remote manipulation of the `ID` variable allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution.
**Recommendations**
Update SourceCodester Class and Exam Timetabling System version 1.0.
As a temporary workaround, restrict access to the '/edit coursea.php' endpoint to minimize the risk of exploitation.